CVE-2006-1523 Denial of service in n/a

Critical 10.0 Published Updated

Improper use of BUG_ON in Linux kernel signal handling may lead to system crashes or denial of service.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is CVE-2006-1523?

CVE-2006-1523 is a critical denial of service vulnerability in Linux kernel, published on 12 Apr 2006.

Official description

The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUG_ON.

Which versions are affected by CVE-2006-1523?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2006-1523?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2006-1523 being exploited?

There is no known exploitation of CVE-2006-1523 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-5gx8-8cfq-h8wm.

Is CVE-2006-1523 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free